Privacy Policy
Learn how we process and protect your personal data
Contents
1. Data Controller
Data Controller: Administrator of wdostawie.pl
Legal basis for processing: In accordance with Art. 6 GDPR - consent of the data subject (Art. 6(1)(a)), performance of a contract (Art. 6(1)(b)), legitimate interests of the controller (Art. 6(1)(f)).
Data Protection Contact
E-mail: privacy@wdostawie.pl
2. What data we collect
As part of providing our services, we collect the following categories of personal data:
Data provided voluntarily:
- Identification data: First and last name (contact form)
- Contact data: Phone number, email address
- Work-related data: City chosen for courier work
Data collected automatically:
- Technical data: IP address, browser and operating system information
- Behavioral data: Visit statistics, time on site, link clicks
- Cookies: Details in section 6
3. Data processing purposes
| Processing purpose | Legal basis | Retention period |
|---|---|---|
| Courier application processing | Consent (Art. 6.1.a GDPR) | Until consent withdrawal, max 2 years |
| User communication | Legitimate interest | 3 years from last contact |
| Analytics and site improvement | Legitimate interest | 25 months (Google Analytics) |
| Legal obligations | Legal obligation (Art. 6.1.c) | According to legislation |
4. Data sharing with third parties
We do not sell or share your personal data with third parties for marketing purposes. Data may be shared only in the following cases:
Delivery platforms:
We share your data with delivery platforms only with your explicit consent and only the data necessary for registration:
- Glovo: First name, last name, phone, city
- Wolt: First name, last name, phone, email
- Uber Eats: First name, last name, phone, email
- Bolt Food: First name, last name, phone
Technical service providers:
- Hosting: Technical data on EU servers
- Google Analytics: Anonymized statistical data
- Formspree: Contact form data
Legal requirements:
In cases required by applicable law or court decisions.
Data transfers outside the EU
Some services (Google Analytics) may transfer data to the USA based on adequacy decisions or standard contractual clauses approved by the European Commission.
5. Data storage and protection
Security measures:
- Encryption: All data is transmitted via secure HTTPS/TLS connections
- Authorization: Only authorized personnel have access to data
- Backups: Regular, encrypted data backups
- Monitoring: Systems for detecting unauthorized access attempts
- Updates: Regular security system updates
Detailed retention periods:
| Data category | Retention period | Basis |
|---|---|---|
| Contact data from form | 2 years from last contact | Legitimate interest |
| Data shared with platforms | Until consent withdrawal | Consent |
| Server logs | 12 months | Legal obligation |
| Google Analytics | 25 months | Legitimate interest |
6. Cookies
Our website uses various types of cookies:
Types of cookies we use:
| Cookie type | Purpose | Storage time | Provider |
|---|---|---|---|
| Necessary | Basic site functionality, storing cookie consent | 1 year | WDOSTAWIE.PL |
| Preferences | Remembering selected language | 30 days | WDOSTAWIE.PL |
| Analytics | Google Analytics - visit statistics, user behavior | 25 months | |
| Marketing | Google Tag Manager - conversion tracking | 2 years |
Managing cookies:
You can control cookies in the following ways:
- Browser settings: Most browsers allow you to control cookies in settings
- Google Analytics opt-out: Extension to disable Google Analytics
- Google Ads management: Google Ads Settings
Important: Disabling some cookies may affect site functionality.
7. Your rights
According to GDPR provisions, you have the following rights:
Basic GDPR rights:
| Right | Description | How to exercise |
|---|---|---|
| Access | Information about processed data | Email to privacy@wdostawie.pl |
| Rectification | Correction of incorrect data | Email with corrected data |
| Erasure | "Right to be forgotten" | Deletion request |
| Restriction | Suspension of processing | Justified request |
| Portability | Data in structured format | Data export request |
| Object | Objection to processing | Motivated objection |
How to exercise your rights:
1. Write to: privacy@wdostawie.pl
2. Include: First name, last name, exact description of request
3. Identity verification (we may ask for confirmation if in doubt)
4. Response time: Up to 30 days from receiving the request
Right to lodge a complaint:
You have the right to lodge a complaint with a data protection supervisory authority if you believe we are processing your data unlawfully:
- Poland - UODO: ul. Stawki 2, 00-193 Warsaw
- Phone: +22 531 03 00
- E-mail: kancelaria@uodo.gov.pl
- Website: uodo.gov.pl
8. Changes to this privacy policy
We reserve the right to update this privacy policy to adapt to:
- Changing legislation
- New technologies and business practices
- Court decisions and supervisory authority decisions
- Development of our services
Notification of changes:
We will inform about all significant changes:
- On the main page - update notification for 30 days
- By email - if we have your email address
- Update date - always visible at the top of the document
Change history:
- 19.09.2025 - First version of privacy policy
Data Protection Contact
For questions about personal data protection, exercising your rights, or filing complaints, contact us:
E-mail: privacy@wdostawie.pl
Response time: Within 72 business hours
Postal address: Available upon request